@Félix 
Let me know if you want to work together one this.  Currently, I'm working 
on the Django aspect.  My current plan is to use pydantic to create a 
nodeWrapper that has a children field that is a list of other 
nodeWrappers.  

@Edward,
You are correct about still being a security issue with html.  Most 
companies have protections against web attacks.  

My thought is most users won't have admin access to their work computer so 
they would have to go through IT which would take a lot of time and may not 
be able to happen.  I suspect attaching a html file will be able to be 
opened.  But worst case, I can put the html on my website and give them a 
link. 

I didn't realize VS code has a web based version. 

On Saturday, September 6, 2025 at 9:14:35 AM UTC-4 Edward K. Ream wrote:

> On Sat, Sep 6, 2025 at 7:47 AM Thomas Passin <[email protected]> wrote:
>
>> On Saturday, September 6, 2025 at 7:14:35 AM UTC-4 Edward K. Ream wrote:
>>
> I don't believe BitDefender would likely detect malicious .leo file. They 
>> would likely constitute a Day zero exploit 
>> <https://en.wikipedia.org/wiki/Zero-day_vulnerability>.
>>
>>
>> I agree; I was only referring to read-only representations that don't 
>> include executable scripts. Exploiting them would require smuggling new 
>> code in using imports of external libraries. That's what a javascript 
>> blocker could prevent. As could a simple representation that doesn't need 
>> to use imported libraries.
>>
>
> My concern is that any .html file, no matter how *supposedly* simple, 
> could contain malware.
>
> *We* aren't going to be generating malware, and *we* aren't going to be 
> *knowingly *passing around malware, but how do we prevent *others *from 
> adding malware to our .html files?
>
> In other words, trusting Félix doesn't solve our security problems.
>
> Edward
>

-- 
You received this message because you are subscribed to the Google Groups 
"leo-editor" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/leo-editor/e73a122c-1a77-4d16-a7d7-e39083b613b4n%40googlegroups.com.

Reply via email to